I have been using the 220.127.116.11 trial version for two days - tonight 'Startup Monitor' - part of Startup Inspector for Windows - reports that '"C:\Program Files\ewido anti-spyware 4.0\ewido.exe" /minimized in Local Machine Run has been removed' If I tell it to restore the entry, the message pops up again about 4 seconds later. Checking ewido's own Autostart list shows that ewido is not present. Is some spyware removing the entry or what? BTW I have had the shield turn off by itself too (yesterday but not today). Any suggestions? Ken Update: Ok, I've stopped the 4 sec message - by simply clicking on the 'Start with Windows' option from the tray icon. However, this doesn't explain how come it was turned off - it was on and I didn't turn it off!